https://github.com/claranet/ansible-role-log4shell

Find Log4Shell CVE-2021-44228 on your system
https://github.com/claranet/ansible-role-log4shell

ansible claranet log4j log4shell role

Last synced: 7 days ago
JSON representation

Find Log4Shell CVE-2021-44228 on your system

• Host: GitHub
• URL: https://github.com/claranet/ansible-role-log4shell
• Owner: claranet
• License: mpl-2.0
• Created: 2021-12-13T16:41:31.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2021-12-17T09:53:52.000Z (almost 3 years ago)
• Last Synced: 2023-03-27T15:32:59.455Z (over 1 year ago)
• Topics: ansible, claranet, log4j, log4shell, role
• Language: Jinja
• Homepage:
• Size: 46.9 KB
• Stars: 11
• Watchers: 15
• Forks: 4
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Ansible role - log4shell

[![Maintainer](https://img.shields.io/badge/maintained%20by-claranet-e00000?style=flat-square)](https://www.claranet.fr/)

[![License](https://img.shields.io/github/license/claranet/ansible-role-log4shell?style=flat-square)](LICENSE)

[![Release](https://img.shields.io/github/v/release/claranet/ansible-role-log4shell?style=flat-square)](https://github.com/claranet/ansible-role-log4shell/releases)

[![Status](https://img.shields.io/github/workflow/status/claranet/ansible-role-log4shell/Ansible%20Molecule?style=flat-square&label=tests)](https://github.com/claranet/ansible-role-log4shell/actions?query=workflow%3A%22Ansible+Molecule%22)

[![Ansible version](https://img.shields.io/badge/ansible-%3E%3D4-black.svg?style=flat-square&logo=ansible)](https://github.com/ansible/ansible)

[![Ansible Galaxy](https://img.shields.io/badge/ansible-galaxy-black.svg?style=flat-square&logo=ansible)](https://galaxy.ansible.com/claranet/log4shell)

> :star: Star us on GitHub — it motivates us a lot!

Find Log4Shell CVE-2021-44228 on your system

This role tries to find JAR and WAR from filesystem and from opened files (lsof)

:warning: Your system may runs slowly during the scan due to a `find` on `/` and the unarchive process to lookup inside the JARs/WARs

This role populates the variable `log4shell_analyze_versions` with a dictionary like this one:

```

{

    "/tmp/rundeck.war": {

        "version": "2.13.2",

        "type": "war",

        "jndilookup": false

    },

    "/tmp/apache-log4j-2.12.1-bin/log4j-core-2.12.1.jar": {

        "version": "2.12.1",

        "type": "jar",

        "jndilookup": true

    },

    "/tmp/apache-log4j-2.12.1-bin/log4j-core-2.12.1-tests.jar": {

        "version": "2.12.1",

        "type": "jar",

        "jndilookup": false

    }

}

```

The key is the path where the role has found the log4j library.

The value is a dictionary containing the log4j version in `version`, the file type in `type` (war/jar) and and the key `jndilookup` which tells you if the file `org/apache/logging/log4j/core/lookup/JndiLookup.class` is present in a jar

A JAR without JndiLookup.class is not vulnerable according to [https://www.kb.cert.org/vuls/id/930724](https://www.kb.cert.org/vuls/id/930724)

## :warning: Requirements

Ansible >= 4

## :zap: Installation

```bash

ansible-galaxy install claranet.log4shell

```

## :gear: Role variables

Variable                | Default value | Description

------------------------|---------------|------------------------

log4shell_scan_path     | /             | Filesystem path to scan

## :arrows_counterclockwise: Dependencies

N/A

## :pencil2: Example Playbook

```yaml

---

- hosts: all

  roles:

    - role: claranet.log4shell

      log4shell_scan_path: /opt

```

## :closed_lock_with_key: [Hardening](HARDENING.md)

## :heart_eyes_cat: [Contributing](CONTRIBUTING.md)

## :copyright: [License](LICENSE)

[Mozilla Public License Version 2.0](https://www.mozilla.org/en-US/MPL/2.0/)